Xiang Li | 李想

Overview RebirthDay, a novel DNS cache poisoning attack targeting recursive resolvers and forwarders, reviving the classic DNS Birthday attack that no longer works since 2002.

Overview RebirthDay, a novel DNS cache poisoning attack targeting recursive resolvers and forwarders, reviving the classic DNS Birthday attack that no longer works since 2002.

Overview 在本文中，我们深入分析了DNS glue records的安全性。

Overview In this paper, we rethink the security threats of stale DNS glue records.

概述 在本文中，我们提出了一个全新的工具ResolverFuzz用来模糊测试解析器。

Overview In this paper, we propose ResolverFuzz to fuzz the resolver.

在黑帽大会2024（美国）上, 汪琦学弟分享了我的研究工作：“TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets”。

In Black Hat USA 2024, Qi Wang presented my work: “TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets”.

在新极棒国际站 2024，段老师和我演示了TuDoor攻击并获得了非凡黑客荣誉称号。

In GeekCon International 2024, Prof.

概述 本论文提出了“突门攻击”，通过系统地探索并利用畸形数据包中DNS响应预处理的逻辑漏洞，导致DNS缓存投毒（1秒）、拒绝服务和资源消耗攻击。

Overview This paper proposes the TuDoor Attack, by systematically exploring and exploiting logic vulnerabilities in DNS response pre-processing with malformed packets, leading to DNS cache poisoning (1s), denial-of-service, and resource consuming attacks.

概述 DNSBomb is a new practical and powerful pulsing DoS attack exploiting DNS queries and responses.

Overview DNSBomb is a new practical and powerful pulsing DoS attack exploiting DNS queries and responses.

在45th IEEE Symposium on Security and Privacy 2024会议上，丰露代替我汇报了TuDoor攻击。

在45th IEEE Symposium on Security and Privacy 2024会议上，丰露代替我汇报了DNSBomb攻击。

In 45th IEEE Symposium on Security and Privacy 2024, Fenglu presented our novel DNSBomb attack on behalf of me cause I couldn’t make it there.

概述 本文分析了Protective DNS的生态系统及其安全问题。

Overview This paper analyzes the ecosystem of protective DNS and its security issues.

概述 该文提出一种新的自动化模糊测试工具“ReqsMiner”来发现CDN转发请求的不一致。

Overview This paper proposes a new automated fuzzing tool “ReqsMiner” to discover CDN forwarding request inconsistencies.

Overview In this paper, we propose ResolverFuzz to fuzz the resolver.

概述 在本文中，我们提出了一个全新的工具ResolverFuzz用来模糊测试解析器。

概述 本论文提出了一个名为BreakSPF的攻击框架：攻击者新发现的一种绕过SPF协议并发起电子邮件欺骗攻击的方法。

Overview This paper proposes a BreakSPF attack framework, a newly discovered method for attackers to bypass the SPF protocol and launch email spoofing attacks.

在黑帽大会2023（欧洲）上, 段海新教授分享了我们的研究工作：“TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers”。

In Black Hat Europe 2023, Professor Haixin Duan presented our work: “TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers”.

Overview In this paper, we present a stealthy mining pool detection system.

Overview In this paper, we present a stealthy mining pool detection system.

Overview In this paper, we present the TsuKing attack.

Overview In this paper, we present the TsuKing attack.

在新极棒 2023比赛中，我演示我们在DNS安全方面的最新研究成果：利用某种未知缺陷实现对任意网站的拒绝服务攻击（大四学弟吴大帅共同参赛，组建TNB团队），最后取得了GEEKCON 2023安全极客大赛“漏洞与利用DAF挑战赛”的亚军。

In GeekCon 2023, I presented our 0-day vulnerability to conduct pulsing DoS attack with Dashuai.

概述 本文对未授权的DNS记录的普遍性进行了全面的测量。

Overview This paper conducted a comprehensive measurement to reveal the prevalence of undelegated DNS records.

在看雪开发者峰会 2023，段海新教授分享了我们的工作：MaginotDNS 攻击——跨越域名解析器的缓存防御“护城河”。

In Kanxue SDC 2023, Professor Haixin Duan presented our work: “The Maginot Line: Attacking the Boundary of DNS Caching Protection”.

在8月18日，受邀参加第21届BlueHat 2023。

On Augest 18, I was invited to attend the 21st BlueHat 2023.

在数字寰宇大家讲堂 2023（在线），我分享了MaginotDNS攻击。

In SHUZIHUANYU Dajia Talk 2023 (online class), I presented my MaginotDNS attack.

在OARC 41 & ICANN DNS Symposium 2023会议上（线上线上相结合），丰露代替我演示了TsuKing攻击。

In OARC 41 & ICANN DNS Symposium 2023 (hybrid in-person and online workshop), Fenglu presented our novel TsuKing attack on behalf of me cause I couldn’t make it there.

在第二届AEGIS Workshop中（线上），我分享了最新的研究工作不死域名。

In the 2nd AEGIS Workshop (online workshop), I presented a novel Ghost Domain attack named Phoenix Domain to the audiences.

在2023年7月11日，受邀参加 MSRC’s Researcher Celebration at Black Hat USA 2022。

On July 11, I was invited to MSRC’s Researcher Celebration at Black Hat USA 2023.

In the 2023 32nd USENIX Security Symposium, I presented one paper “The Maginot Line: Attacking the Boundary of DNS Caching Protection” to the audiences.

在2023年第32届USENIX安全探讨会上，我分享了最新研究工作：“The Maginot Line: Attacking the Boundary of DNS Caching Protection”，也见到和交到了很多朋友。

在黑帽大会2023（美国）上, 李洲助理教授分享了我们的研究工作：“The Maginot Line: Attacking the Boundary of DNS Caching Protection”。